Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
grugq
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
31.
▲
by
grugq
5y ago
Try Patrick Rothfuss. Fair warning though, he hasn’t ever written the last part of the trilogy. The Blacktongue Thief is also good.
32.
▲
by
grugq
5y ago
Fiction: - the blacktongue thief ; if you love rothfuss, then you’ll love this. - between two fires ; same author. Really great book about the Black Death but also demons. - hench ; a normie uses Zersetzung against the alter egos
33.
▲
by
grugq
5y ago
Currently reading it. I recommend “Against the Grain” and also “Pre Industrial Societies.” They give a really good perspective on human life and the structures we create. One of my favourite quotes is: the hallmarks of a state: appropriatio
34.
▲
by
grugq
5y ago
FWIW dang was extremely helpful when I had an issue. He worked with me to resolve it, rather than take arbitrary executive action. I don’t credit any accusation of dang playing favourites to YC founders. Basically, there is no level of assi
35.
▲
by
grugq
5y ago
There once was a pianist from Nantucket …
36.
▲
by
grugq
5y ago
It is an on prem system. The customer pays per agent deployed. They buy a license for some number (N) of agents. NSO doesn’t know where those N agents are, but it knows that there are N of them.
37.
▲
by
grugq
5y ago
The FBI uses private contractors for highly specialised tasks, and they perform a law enforcement role also.
38.
▲
by
grugq
5y ago
Licensing.
39.
▲
by
grugq
5y ago
Bezos nudes weren’t stolen by a hack, but by physical access to his mistress’s device. Her brother. At least, that’s what I recall. The forensic investigation showed that bezos’ device was clean. From what I saw.
40.
▲
by
grugq
5y ago
There’s a paper that addresses this fundamental problem: https://www.freehaven.net/anonbib/cache/oakland2013-parrot.p... @inproceedings{oakland2013-parrot, title = {The Parrot is Dead: Observing Unobservable
41.
▲
by
grugq
5y ago
Not early, but: talking to the press without any media training.
42.
▲
by
grugq
5y ago
There is a lot involved, but the basic idea is that your rifle and sight need to be calibrated to match from where you’re shooting to where you’re shooting. The journey to the sniper hides was long, arduous, grueling, and not exactly gu
43.
▲
by
grugq
5y ago
There was two years of war before the British had figured out how to do trench raiding effectively. By late 1916 they had the “storm trooper” tactics completely figured out, something the Germans wouldn’t manage until 1918. The Germans on t
44.
▲
by
grugq
5y ago
The Finnish war gave us the term “Molotov cocktail.” When the Russians began bombing Helsinki they claimed that the bombers were dropping food to the Finnish people. The Finns made a joke that bombs were Molotov’s bread baskets, or picnic b
45.
▲
by
grugq
6y ago
Thanks
46.
▲
by
grugq
6y ago
My problem is not with SolarWind but with the analysis that keeps raising the password as the one and only problem. “If only they had good password hygiene then the company would’ve been totally safe against the Russian intelligence service
47.
▲
by
grugq
6y ago
I call them the SVR, an agency formed from the FCD of the KGB. The first chief directorate was responsible for international espionage. The internal security responsibilities, along with everything else, was made into the FSB. There are som
48.
▲
by
grugq
6y ago
Additional literature on the topic[0]. The finding is that any payment at all is sufficient for the operation to continue. This makes sense for ransomware was well since the marginal cost of hacking additional targets is effectively zero.
49.
▲
by
grugq
6y ago
Costs are zero. The ransomware platform runs as a server somewhere, and whether they get one ransom payment or 1000 their costs are the same. The gangs that do the hacking operate on commission, they attempt to phish multiple targets (hundr
50.
▲
by
grugq
6y ago
yup. I've been here for years. Only comment when it is relevant, so maybe once every couple years.
51.
▲
by
grugq
6y ago
hi.
52.
▲
by
grugq
6y ago
Author here, and yes, that is correct.
53.
▲
by
grugq
6y ago
Thank you, I appreciate it. It is very unlikely that FIN7 are aware of their successful exploitation of the golden triangle. They almost certainly just pursued what worked best for them, creating a lean mean cybercriming machine along the w
54.
▲
by
grugq
6y ago
I’d call it dual use, but I’m not actually aware of a benign use case for JIRA! ;)
55.
▲
by
grugq
7y ago
This is not supported by the evidence. They wear street clothes. Look at any pictures or videos, you'll see that they're wearing normal clothes of all colors.
56.
▲
by
grugq
7y ago
This should be put in some context. Today is the anniversary of China as a communist country. The Hong Kong marchers were all wearing black today as a sign of mourning. That is why the kids are dressed in black (so please, no black bloc
57.
▲
by
grugq
7y ago
Ok. I'm still unclear on your point. You are referencing cases where exploits were in the news. What does that have to do with vulnerability markets? Are you saying that the IC used exploits only twice? And they were misused both times
58.
▲
by
grugq
7y ago
> I appreciate your honesty and taking responsibility. It is a fatal character flaw I have. When people want to know about something I try to help them. > You mention that everyone is doing it with no citations of academic sources. I&
59.
▲
by
grugq
7y ago
Yeah. They don’t exist. People don’t think about things rationally, they see phrases like “black market” and assume it is some sort of criminal transaction with armed guards and meetings at midnight and shit. It is nothing like that. It is
60.
▲
by
grugq
7y ago
I’m sorry, I don’t understand.
More ›